WB 2.08.x

// we have to do some cleanup here, ASAP!

// Include the WB functions file

require_once(WB_PATH.'/framework/functions.php');

// Get the search type

$match = 'all';

if(isset($_REQUEST['match'])) {

	$match = $wb->add_slashes(strip_tags($_REQUEST['match']));

// TODO: with the new method, there is no need for search_entities_string anymore.

//   When the old method disappears, it can be removed, too.

//   BTW: in this case, there is no need for 

//   $text = umlauts_to_entities(strip_tags($content), strtoupper(DEFAULT_CHARSET), 0);

//   in wb/modules/wysiwyg/save.php anymore, too. Change that back to $text=strip_tags($content);

$search_normal_string = 'unset'; // for regex

	if ($match!='exact') {

	// convert string to utf-8

	$string = entities_to_umlauts($string, 'UTF-8');

// Get list of usernames and display names

$query = $database->query("SELECT user_id,username,display_name FROM ".TABLE_PREFIX."users");

$users = array('0' => array('display_name' => $TEXT['UNKNOWN'], 'username' => strtolower($TEXT['UNKNOWN'])));

if($query->numRows() > 0) {

	while($user = $query->fetchRow()) {

		$users[$user['user_id']] = array('display_name' => $user['display_name'], 'username' => $user['username']);

	}

}

// Get search settings

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'header' LIMIT 1");

$fetch_header = $query->fetchRow();

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'footer' LIMIT 1");

$fetch_footer = $query->fetchRow();

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'results_header' LIMIT 1");

$fetch_results_header = $query->fetchRow();

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'results_footer' LIMIT 1");

$fetch_results_footer = $query->fetchRow();

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'results_loop' LIMIT 1");

$fetch_results_loop = $query->fetchRow();

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'no_results' LIMIT 1");

$fetch_no_results = $query->fetchRow();

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'module_order' LIMIT 1");

if($query->numRows() > 0) { $fetch_module_order = $query->fetchRow();

} else { $fetch_module_order['value'] = ""; }

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'max_excerpt' LIMIT 1");

if($query->numRows() > 0) { $fetch_max_excerpt = $query->fetchRow();

} else { $fetch_max_excerpt['value'] = '15'; }

$search_max_excerpt = (int)$fetch_max_excerpt['value'];

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'cfg_show_description' LIMIT 1");

if($query->numRows() > 0) { $fetch_cfg_show_description = $query->fetchRow();

} else { $fetch_cfg_show_description['value'] = 'true'; }

if($fetch_cfg_show_description['value'] == 'false') { $cfg_show_description = false;

} else { $cfg_show_description = true; }

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'cfg_search_description' LIMIT 1");

if($query->numRows() > 0) { $fetch_cfg_search_description = $query->fetchRow();

} else { $fetch_cfg_search_description['value'] = 'true'; }

if($fetch_cfg_search_description['value'] == 'false') { $cfg_search_description = false;

} else { $cfg_search_description = true; }

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'cfg_search_keywords' LIMIT 1");

if($query->numRows() > 0) { $fetch_cfg_search_keywords = $query->fetchRow();

} else { $fetch_cfg_search_keywords['value'] = 'true'; }

if($fetch_cfg_search_keywords['value'] == 'false') { $cfg_search_keywords = false;

} else { $cfg_search_keywords = true; }

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'cfg_enable_old_search' LIMIT 1");

if($query->numRows() > 0) { $fetch_cfg_enable_old_search = $query->fetchRow();

} else { $fetch_cfg_enable_old_search['value'] = 'true'; }

if($fetch_cfg_enable_old_search['value'] == 'false') { $cfg_enable_old_search = false;

} else { $cfg_enable_old_search = true; }

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'cfg_enable_flush' LIMIT 1");

if($query->numRows() > 0) { $fetch_cfg_enable_flush = $query->fetchRow();

} else { $fetch_cfg_enable_flush['value'] = 'false'; }

if($fetch_cfg_enable_flush['value'] == 'false') { $cfg_enable_flush = false;

} else { $cfg_enable_flush = true; }

$query = $database->query("SELECT value FROM ".TABLE_PREFIX."search WHERE name = 'time_limit' LIMIT 1"); // time-limit per module

if($query->numRows() > 0) { $fetch_search_time_limit = $query->fetchRow();

} else { $fetch_search_time_limit['value'] = 'false'; }

$search_time_limit = (int)($fetch_search_time_limit['value']);

if($search_time_limit < 1) $search_time_limit = 0;

// Replace vars in search settings with values

$vars = array('[SEARCH_STRING]', '[WB_URL]', '[PAGE_EXTENSION]', '[TEXT_RESULTS_FOR]');

$values = array($search_display_string, WB_URL, PAGE_EXTENSION, $TEXT['RESULTS_FOR']);

$search_footer = str_replace($vars, $values, ($fetch_footer['value']));

$search_results_header = str_replace($vars, $values, ($fetch_results_header['value']));

$search_results_footer = str_replace($vars, $values, ($fetch_results_footer['value']));

$search_module_order = $fetch_module_order['value'];

// check $search_max_excerpt

if(!is_numeric($search_max_excerpt)) {

	$search_max_excerpt = 15;

}

// Work-out what to do (match all words, any words, or do exact match), and do relevant with query settings

$all_checked = '';

$any_checked = '';

$exact_checked = '';

if($match != 'exact') {

	// Split string into array with explode() function

	// Split $string_entities, too

	if ($match == 'any') {

		$any_checked = ' checked="checked"';

		$logical_operator = ' OR';

	} else {

		$all_checked = ' checked="checked"';

		$logical_operator = ' AND';

	}

} else {

	$exact_checked = ' checked="checked"';

	$exact_string=$search_normal_string;

	$search_normal_array[]=$exact_string;

	$exact_string=$search_entities_string;

	$search_entities_array[]=$exact_string;

}	

// make an extra copy of search-string for use in a regex and another one for url

foreach ($search_normal_array AS $str) {

	// this doesn't work correctly for unicode-chars: '|test' will work, but '|über' not.

$search_url_array=explode(' ', $search_url_string);

			$modules[] = $module['module']; // $modules is an array of strings

	// First, use an alternative search-method, without sql's 'LIKE'.

	// 'LIKE' won't find upper/lower-variants of umlauts, cyrillic or greek chars without propperly set setlocale();

	// and even if setlocale() is set, it won't work for multi-linguale sites.

	// Use the search-module-extension instead.

		'search_words' => $search_words, // search-string, prepared for regex

		'search_url_array' => $search_url_array, // original search-string. ATTN: string is not quoted!

					'search_words' => $search_words, // needed for preg_match_all

		'search_words' => $search_words, // search-string, prepared for regex

		'search_url_array' => $search_url_array, // original search-string. ATTN: string is not quoted!

		WHERE visibility NOT IN ('none','deleted') AND searching = '1' $search_path_SQL"

	);

	if($cfg_enable_old_search) {